File tree Expand file tree Collapse file tree 1 file changed +7
-4
lines changed Expand file tree Collapse file tree 1 file changed +7
-4
lines changed Original file line number Diff line number Diff line change 4
4
branches :
5
5
- main
6
6
- int
7
+ permissions :
8
+ contents : read
9
+
7
10
jobs :
8
11
code-review :
9
- name : int tests
12
+ name : Code Review
10
13
runs-on : ubuntu-latest
11
14
permissions :
12
15
contents : read
13
16
pull-requests : write
14
17
steps :
15
18
- name : Harden Runner
16
- uses : step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3
19
+ uses : step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
17
20
with :
18
- egress-policy : audit # TODO: change to 'egress-policy: block' after couple of runs
21
+ egress-policy : audit
19
22
20
23
- name : Code Review
21
- uses : docker://ghcr.io/step-security/code-reviewer/int:latest # docker pull ghcr.io/step-security/code-reviewer/int:latest
24
+ uses : docker://ghcr.io/step-security/code-reviewer/int:latest
22
25
env :
23
26
PAT : ${{ secrets.GITHUB_TOKEN }}
You can’t perform that action at this time.
0 commit comments